Yaroslav
DEVSECOPS ENGINEER, BACKEND DEVELOPER
- Commercial experience:
- 2 years
- Education:
- higher
- English proficiency:
- B2
Specialization
- Python
- Lua
- PostgreSQL
- Kubernetes
- TypeScript
- Zustand
- Tailwind
- REST API
Key Skills
- Python (Backend Development) – server application and microservice development, API support
- PostgreSQL – database design, query optimization, replication and monitoring setup
- Kubernetes (K8s) – container orchestration, CI/CD pipeline setup, cluster management
- Docker – application containerization, image optimization, multi-stage builds
- CI/CD (GitLab CI, GitHub Actions) – build, test, and deployment automation
- Security & Compliance (DevSecOps) – implementing security practices into DevOps processes, vulnerability scanning (SAST/DAST), secrets management
- Monitoring & Logging – Prometheus, Grafana, alerting setup
- API Design & Architecture – REST API design, microservice architecture, service integration
- Data handling: Zustand, React Query (TanStack)
- Git flow
- Figma: variants, variables, prototyping, design systems
Basic Skills
- React, Next js, Vue, Nuxt
- TypeScript, JavaScript (ES6+)
- React Hook Form
- React Router;Vue Router
- React DevTools, Chrome DevTools
- Git, GitHub
- Markup and styling (SCSS, CSS Modules, CSS-in-JS, Tailwind)
- Redux, Redux toolkit, zustand
- Axios, react-query, TanTask
- Lighthouse / Core Web Vitals optimization
- i18n setup (internationalization, content localization)
- SSR (Server-Side Rendering), SSG (Static Site Generation) and ISR (Incremental Static Regeneration) setup
- Rendering and data optimization with React Suspense and Streaming
- Metadata and Open Graph tags setup
- 3D graphics: Three.js
- Animations: GSAP
Tools and Technologies
- Poetry
- uv
- pylint
- pytest
- black
- pyrefly
- ruff
- PostgreSQL
- YugabyteDB
- RabbitMQ
- KnotDNS
- Docker
- Kubernetes
- Prometheus
- Grafana
- VictoriaMetrics
- VictoriaLogs
- Fluent
- Argo CD
- Sealed Secrets
- Piraeus (LINSTOR
- Semgrep
- SonarQube
- Trivy
- nikto
- nuclei
- burp
- Nmap
- feroxbuste
- impacket
- JTR
- hashcat
- bloodhound
- MSF
- WinPEAS
- LinPEAS
- LOLBAS
- Mimikatz
Also have experience with:
Rust (rbatis, salvo, ohkami), Go (sqlboiler, fuego), C++ (C++/CLI, boost)
Projects
01.2026 - 03.2026
AI call bot
DEVSECOPS ENGINEER, BACKEND DEVELOPER
15 SPECIALISTS ON THE PROJECT
- – development and support of backend services in Python, implementation of microservice architecture
- – PostgreSQL setup and optimization for storing logs and traffic analytics
- – service containerization using Docker and orchestration in Kubernetes
- – CI/CD pipeline setup for automated deployment and testing
- – implementation of DevSecOps practices: secrets management, image scanning, application security control
- – system monitoring and alerting
- – performance optimization, service scaling under high loads
- – integration with external security and traffic analytics systems
09.2024 - PRESENT
Comprehensive SaaS solution for protecting web resources from DDoS attacks and web threats
- DEVSECOPS ENGINEER, BACKEND DEVELOPER
- 15 SPECIALISTS ON THE PROJECT
- – development and support of backend services in Python, implementation of microservice architecture
- – PostgreSQL setup and optimization for storing logs and traffic analytics
- – service containerization using Docker and orchestration in Kubernetes
- – CI/CD pipeline setup for automated deployment and testing
- – implementation of DevSecOps practices: secrets management, image scanning, application security control
- – system monitoring and alerting
- – performance optimization, service scaling under high loads
- – integration with external security and traffic analytics systems
05.2023 – 07.2023
Custom CAPTCHA
- BACKEND DEVELOPER
- 5 SPECIALISTS ON THE PROJECT
- – architecture design
- – interaction logic development
- – protection against third-party interference implementation
09.2024 – 12.2024
Platform for aggregating information collected during penetration testing and generating reports
- DEVSECOPS ENGINEER, BACKEND DEVELOPER
- 5 SPECIALISTS ON THE PROJECT
- – development and support of the platform's backend in Python (FastAPI)
- – PostgreSQL database design and optimization, index and replication setup
- – implementation of services for collecting, storing, and processing vulnerability data
- – integration with external security analysis APIs (Burp Suite, Nessus, OpenVAS)
- – service containerization and deployment in Kubernetes, CI/CD pipeline setup
- – implementation of DevSecOps practices: image scanning, SAST/DAST checks, secrets management
- – monitoring and logging setup
- – participation in architectural decisions and system performance optimization
02.2024 - PRESENT
Website protection service
- DEVSECOPS ENGINEER, BACKEND DEVELOPER
- 9 SPECIALISTS ON THE PROJECT
- – development and maintenance of the platform's backend in Python, creation of scalable microservices
- – PostgreSQL design and optimization for storing events, logs, and security analytics
- – service containerization with Docker and orchestration in Kubernetes for reliable deployment
- – CI/CD pipeline setup for automated testing, builds, and releases
- – implementation of DevSecOps practices: vulnerability scanning, secrets management, code security control
- – system monitoring and alerting using Prometheus, Grafana
- – performance optimization and service scaling under high loads
- – integration with external threat analysis and web application protection systems
Education
- 4 years at South Ural State University, information security
- 2 years, University of Russian Innovative Education
- 6-month Yandex Practicum retraining course, software tester
- 2 months of STEPIK professional development courses: test automation with Selenium and Python